112737 matches found
GHSA-8M29-FPQ5-89JJ
creationtimestamp| type| source ---|---|--- 2026-04-18 03:45:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjqjn7dvefi2...
CVE-2026-6048
The Flipbox Addon for Elementor (WordPress) contains a Stored Cross-Site Scripting (XSS) vulnerability in the Flipbox widget button URL parameter custom_attributes. In versions up to 2.1.1, it validates attribute names with esc_html(), which does not block event handler attributes (e.g., onmouseo...
CVE-2023-0341
creationtimestamp| type| source ---|---|--- 2026-04-18 03:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhbpuspf26 2026-04-18 03:16:49+00:00| seen| Telegram/pg0pMMwJv5FTHbXxc3MO00N2B5ehQq9biiv2KNNNK0Va5Yk...
CVE-2026-40489
creationtimestamp| type| source ---|---|--- 2026-04-18 03:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhbpuspf26 2026-04-18 03:16:49+00:00| seen| Telegram/pg0pMMwJv5FTHbXxc3MO00N2B5ehQq9biiv2KNNNK0Va5Yk...
CVE-2026-40337
creationtimestamp| type| source ---|---|--- 2026-04-18 01:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcwu3bju2r...
CVE-2026-40349
creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 01:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqcdgwknf22 2026-05-31 16:07:09+00:00| seen|...
CVE-2026-40348
Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can trigger server-side requests to arbitrary internal targets through POST /settings/jellyfin/server-url-verify. The endpoint accepts a user-controlled URL, appends...
CVE-2026-39314
creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq5442fbv2n...
CVE-2026-34978
creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq5442fbv2n...
CVE-2026-27447
creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:23+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq542v5rm2c...
CVE-2026-40348 Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing
Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can trigger server-side requests to arbitrary internal targets through POST /settings/jellyfin/server-url-verify. The endpoint accepts a user-controlled URL, appends...
EUVD-2026-23617
Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can trigger server-side requests to arbitrary internal targets through POST /settings/jellyfin/server-url-verify. The endpoint accepts a user-controlled URL, appends...
PT-2026-33540
Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can trigger server-side requests to arbitrary internal targets through POST /settings/jellyfin/server-url-verify. The endpoint accepts a user-controlled URL, appends...
PT-2026-33589
The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flipbox widget's button URL custom attributes field in all versions up to, and including, 2.1.1 due to insufficient validation of custom attribute names. Specifically, the plugin uses esc htm...
CVE-2026-29013
creationtimestamp| type| source ---|---|--- 2026-04-17 23:20:15+00:00| published-proof-of-concept| Telegram/3g7V6SV71PzaXn8Yubvw4Z7qK4NE-jaYcye5068Hc2mjiw 2026-04-17 23:35:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjq3oezhpm2f...
CVE-2026-40352
creationtimestamp| type| source ---|---|--- 2026-04-17 23:11:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjq2cqlx3o2r 2026-04-17 23:20:20+00:00| published-proof-of-concept| Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI 2026-04-27 22:07:07+00:00| seen|...
CVE-2026-33689
creationtimestamp| type| source ---|---|--- 2026-04-17 23:08:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjq25uaolu2r 2026-04-17 23:20:07+00:00| published-proof-of-concept| Telegram/nSRvyMMuDO4LVDIhCRx7gx27JwRYoRyOv-3439P5STagmw...
CVE-2026-40948
creationtimestamp| type| source ---|---|--- 2026-04-17 23:07:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjq24b6p3e2r...